Changeset 9601

Timestamp:

11/10/2008 10:16:50 PM (18 years ago)

Author:

markjaquith

Message:

Use prepare() in get_comments()

File:

• trunk/wp-includes/comment.php (modified) (1 diff)

trunk/wp-includes/comment.php

@@ -228 +228 @@
 
     if ( ! empty($post_id) )
-        $post_where = "comment_post_ID = $post_id AND";
+        $post_where = $wpdb->prepare( 'comment_post_ID = %d AND', $post_id );
     else
         $post_where = '';